Security Engineer

About the Role: The Security Engineer plays a crucial role in the development, implementation, maintenance, and monitoring of security controls at LMAX. This position focuses on security technologies and requires individuals with a curious mindset and the ability to identify vulnerabilities at both technical and process levels. Security Engineers must stay updated with the latest tools, security methods, and developments. About You: You are passionate about information technology, understand computer systems and networks to a high level and can work with a variety of operating systems and programming/scripting languages. You have an inquisitive mindset, showing the ability to identify vulnerabilities at both technical and process levels, and to explain your findings to a non-technical audience. You have an automation-first mindset, understand information security standards and have experience implementing best practice in on-premises and cloud-based environments. You are capable of working independently in a fast-paced environment. We encourage independent problem-solving, but also expect you to engage with your peers and work with them to break knowledge silos. You will initiate constructive discussions and propose solutions to any challenges encountered. Most importantly, you understand the necessity of harmonizing security endeavours with business goals. Main Duties & Responsibilities: Core: Map attack paths and help implement controls to manage associated risks. Create and maintain processes and procedures to demonstrate system control to auditors and regulators. Work within the Security Operations Centre to implement and maintain security controls, whilst ensuring objectives are met Participate in the security incident management process, including cyber incident response and remediation Contribute to internal and third-party IT audits across business functions and activities within the LMAX Group. Create, maintain, and deliver cyber security awareness training for colleagues. Manage and maintain the security infrastructure and solutions Identify opportunities for process improvement and implement associated automations as required. Mainstream: Manage and mitigate technical vulnerabilities, working with internal teams and external suppliers towards remediation Review and fulfill security requests from the business for various services. Help manage security risks by reviewing business requests and ensuring security posture is unaffected Proactively investigate host, network, and log-based security events and respond to suspected compromises. Collaborate with identity and access management, associated policies and controls Once more advanced in the role: Manage and maintain the security infrastructure. Research and evaluate technologies to mitigate cyber security threats. Assist with successful handling of major security incidents and investigations. Establish strategies and procedures for offensive…